be928d68e0e412826aeccea4c385895f_JaffaCakes118 | Triage

Sharing

General

Target

be928d68e0e412826aeccea4c385895f_JaffaCakes118
Size

590KB
MD5

be928d68e0e412826aeccea4c385895f
SHA1

a309dd565ebc796ade2df8962bf89fabcf561698
SHA256

470a47c16294d724cbfbeff06ac09ab1cbfa26b9c16adf1adb1651c7ac9c80dd
SHA512

5de825be8c7b9993459180dad125f9a2835738befd37270adf032bf87b6e2fcbfdf22f4be36b71329de091b581074cdc944a0fd20a45cb8a9cba0095cf557f13
SSDEEP

12288:Pw/8IIyz3GY+O8tacPeor0/7YyCaAmyTaUVce0:Pwp7+/tNP5JrmqU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
be928d68e0e412826aeccea4c385895f_JaffaCakes118

Files

be928d68e0e412826aeccea4c385895f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 569KB - Virtual size: 568KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ